1. www.syssec-project.eu
SysSec: A European Network of Excellence
in Managing Threats and Vulnerabilities in
the Future Internet
Evangelos Markatos
markatos@ics.forth.gr
markatos@ics.forth.gr - www.syssec-project.eu – Effectsplus Clustering Event – July 4, 2011 1

2. Outline of the talk
Security Challenges: What is the
problem?
Hackers are getting more sophisticated
The impact of cyberattacks is getting
larger
What are we doing about this?
SysSec: 4-year NoE to consolidate
Research in managing threats for the
Future Internet
markatos@ics.forth.gr - www.syssec-project.eu – Effectsplus Clustering Event – July 4, 2011 2

3. Outline of the talk
Security Challenges: What is the
problem?
Hackers are getting more sophisticated
The impact of cyberattacks is getting
larger
What will we do?
SysSec: 4-year NoE to consolidate
Research in managing threats for the
Future Internet
markatos@ics.forth.gr - www.syssec-project.eu – Effectsplus Clustering Event – July 4, 2011 3

4. Government: UK Parliament’s PCs infected
markatos@ics.forth.gr - www.syssec-project.eu – Effectsplus Clustering Event – July 4, 2011 4

5. Transportation: Cars out of control
markatos@ics.forth.gr - www.syssec-project.eu – Effectsplus Clustering Event – July 4, 2011 5

6. Energy: No electricity
markatos@ics.forth.gr - www.syssec-project.eu – Effectsplus Clustering Event – July 4, 2011 6

7. Defense: fighter planes grounded
markatos@ics.forth.gr - www.syssec-project.eu – Effectsplus Clustering Event – July 4, 2011 7

8. Last but not least: Stuxnet!
Tailored specifically against
SCADA systems, is the most
recent demonstration that not
only attacks are
sophisticated, complex and
well-coordinated
It also demonstrates that the
bad guys:
- are very well-equipped
- have ambitious goals
(cyber-physical systems)
markatos@ics.forth.gr - www.syssec-project.eu – Effectsplus Clustering Event – July 4, 2011 8

9. Rent-a-botnet!
There is even a free 3-minute trial!
markatos@ics.forth.gr - www.syssec-project.eu – Effectsplus Clustering Event – July 4, 2011 9

10. Outline of the talk
Security Challenges: What is the
problem?
Hackers are getting more sophisticated
The impact of cyberattacks is getting
larger
What will we do?
SysSec: 4-year NoE to consolidate
Research in managing threats for the
Future Internet
markatos@ics.forth.gr - www.syssec-project.eu – Effectsplus Clustering Event – July 4, 2011 10

11. Predicting “what’s next”
SysSec: managing threats
and vulnerabilities for the
future Internet
a NoE, 2010-2014
General approach
Proactive solutions
Collaborate
– At a European level
– With our international
colleagues
(see website for updated list)
markatos@ics.forth.gr - www.syssec-project.eu – Effectsplus Clustering Event – July 4, 2011 11

12. SysSec proposes a game-changing approach to
cybersecurity:
Currently Researchers are mostly reactive:
they usually track cyberattackers after an attack has been launched
thus, researchers are always one step behind attackers
SysSec aims to break this vicious cycle
Researchers should become more proactive:
Anticipate attacks and vulnerabilities
Predict and prepare for future threats
Work on defenses before attacks materialize.
markatos@ics.forth.gr - www.syssec-project.eu – Effectsplus Clustering Event – July 4, 2011 12

13. SysSec Aim and Objectives (I)
1. Create an active, vibrant, and collaborating community
of Researchers with
the expertise, capacity, and determination to anticipate and
mitigate the emerging threats and vulnerabilities on the Future
Internet.
SysSec aims
to create a sense of “community” among researchers,
to mobilize this community,
to consolidate its efforts,
to expand their collaboration internationally, and
become the single point of reference for system security research in
Europe.
markatos@ics.forth.gr - www.syssec-project.eu – Effectsplus Clustering Event – July 4, 2011 13

14. SysSec Aim and Objectives (II)
2. Advance European Security Research well beyond the
state of the art
research efforts are fragmented
SysSec aims to provide a research agenda and
align their research activities with the agenda
make SysSec a leading player in the international arena.
markatos@ics.forth.gr - www.syssec-project.eu – Effectsplus Clustering Event – July 4, 2011 14

15. SysSec Aim and Objectives (III)
3. Create a virtual distributed Center of Excellence in
the area of emerging threats and vulnerabilities.
By forming a critical mass of European Researchers and by
aligning their activities,
A leading role internationally, empowered to undertake large-
scale, ambitious and high-impact research efforts.
4. Create a Center of Academic Excellence in the area
create an education and training program targeting young
researchers and the industry.
lay the foundations for a common graduate degree in the area
with emphasis on Systems Security.
markatos@ics.forth.gr - www.syssec-project.eu – Effectsplus Clustering Event – July 4, 2011 15

16. SysSec Aim and Objectives (IV)
5. Maximize the impact of the project by proactive
dissemination to the appropriate stakeholders.
disseminate its results to international stakeholders so as to form
the needed strategic partnerships (with similar projects and
organizations overseas) to play a major role in the area.
dissemination within the Member States will
reinforce SysSec's role as a center of excellence and
make SysSec a beacon for a new generation of European Researchers.
1st SysSec Workshop, July 6th 2011, Amsterdam, VU
6. Create Partnerships and transfer technology to the
European Security Industry.
create a close partnership with Security Industry
facilitate technology transfer wherever possible to further
strengthen the European Market.
markatos@ics.forth.gr - www.syssec-project.eu – Effectsplus Clustering Event – July 4, 2011 16

17. 1st SysSec Workshop
By the numbers:
23 position papers
i.e. where is the security research going?
6 (longer) Student/Research papers
95 authors
36 organizations
One session on INCO strategy
In trustworthy ICT
Organized by the BIC project
markatos@ics.forth.gr - www.syssec-project.eu – Effectsplus Clustering Event – July 4, 2011 17

18. 1st SysSec Workshop – Who?
markatos@ics.forth.gr - www.syssec-project.eu – Effectsplus Clustering Event – July 4, 2011 18

19. 1st SysSec Workshop – International?
markatos@ics.forth.gr - www.syssec-project.eu – Effectsplus Clustering Event – July 4, 2011 19

20. markatos@ics.forth.gr - www.syssec-project.eu – Effectsplus Clustering Event – July 4, 2011 20

21. Research Roadmap
markatos@ics.forth.gr - www.syssec-project.eu – Effectsplus Clustering Event – July 4, 2011
21

22. How to collaborate with SysSec?
Join our constituency (mailing list):
http://www.syssec-project.eu
Contribute to the research roadmap
Provide feedback on emerging threats
Share your ideas on future security issues
Contribute to our systems security University curriculum
Contribute homeworks/exams, lab exercises
Teach some of the courses at your University
Share some of your course material
Send your students to the partners
with SysSec Scolarships
Send your graduates to the SysSec partners
With SysSec Marie Curie Fellowships
Become an Associated Partner
markatos@ics.forth.gr - www.syssec-project.eu – Effectsplus Clustering Event – July 4, 2011 22

23. Summary
Hackers are getting more sophisticated
The impact of cyberattacks is getting higher
We need to collaborate to manage emerging
threats on the future Internet
SysSec started on Sept 1st.
Help us define future security threats
Help us teach our students system security
Join us to break the vicious cycle of cyberattacks.
markatos@ics.forth.gr - www.syssec-project.eu – Effectsplus Clustering Event – July 4, 2011 23

24. SysSec: A European Network of Excellence
in Managing Threats and Vulnerabilities in
the Future Internet
http://www.syssec-project.eu
http://twitter.com/syssecproject
Evangelos Markatos
FORTH-ICS
markatos@ics.forth.gr - www.syssec-project.eu – Effectsplus Clustering Event – July 4, 2011 24